Packages

validator

13.15.35 · 2 Apr 2026MIT35M / weekRepositorynpmAtom feed

Upgrading validator From 0.4.28 to 13.15.35

159 releases in betweennotes for 83

Reading releases, release notes and advisories…

Other targets from 0.4.28Newest 0.x0.5.0Clears its 9 advisories13.15.22
3.0.0, 2.0.0, 1.0.0 have no release note on GitHub or in the repository's changelog, so their breaking changes are missing from the counts below.
  1. 0.4.28yours
  2. 0.5.0major
  3. 1.0.0major
  4. 11 releases
  5. 2.0.0major
  6. 1 release
  7. 3.0.0major
  8. 58 releases
  9. 4.0.0major
  10. 4 releases
  11. 4.0.5security
  12. 15 releases
  13. 5.0.0major
  14. 7 releases
  15. 6.0.0major
  16. 4 releases
  17. 7.0.0major
  18. 2 releases
  19. 8.0.0major
  20. 2 releases
  21. 9.0.0major
  22. 6 releases
  23. 9.4.1security
  24. 10.0.0major
  25. 12 releases
  26. 11.0.0major
  27. 1 release
  28. 12.0.0major
  29. 2 releases
  30. 13.0.0major
  31. 7 releases
  32. 13.7.0security
  33. 5 releases
  34. 13.15.20security
  35. 3 releases
  36. 13.15.35target
1+
change to make
9
advisories fixed
397+
new
67+
fixes

Counted from 83 of 159 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking4.1.0

Security

  • isURL: improve protocol detection. Resolves CVE-2025-56200 @theofidry

    13.15.20
  • trim: remove regex to prevent ReDOS attack @tux-tn

    13.7.0
  • Patched a REDOS vulnerability in isDataURI

    9.4.1
  • Fixed a denial of service vulnerability in the isEmail() regex

    4.0.5

Release by release

  1. 13.15.35

    2 Apr 20269 new · 3 fixes
    • new

      isISO31661Alpha2/isISO31661Alpha3: add support for Kosovo (XK / XXK)

    • new

      isHexColor: ignore non-object options @yuna0831

    • new

      isTaxID: improve pt-BR locale by adding support for alphanumeric CNPJ format @easedu

    • new

      isTaxID: improve pt-BR locale by adding support for formatted CPF values @easedu

  2. 13.15.26

    18 Dec 20253 new · 1 fix
    • new

      isHexColor: add require_hashtag option @Numbers0689

    • new

      isURL: handle possible bypass with URL-encoded content @WikiRik

    • new

      isIBAN: improve IR locale @ds1371dani

    • fixed
  3. 13.15.23

    10 Nov 20251 fix
  4. 13.15.22

    9 Nov 20252 new · 1 fix
    • new

      isURL: fix regression with hostnames with ports @mbtools

    • new

      isLength: improve handling Unicode variation selectors @koral--

    • fixed
  5. 13.15.20

    Security fix26 Oct 20254 new · 2 fixes
    • security

      isURL: improve protocol detection. Resolves CVE-2025-56200 @theofidry

    • new

      isMobilePhone: add ar-QA locale @WardKhaddour

    • new

      isAlpha/isAlphanuneric: add Indic locales (ta-IN, te-IN, kn-IN, ml-IN, gu-IN, pa-IN, or-IN)

    • new

      isBase64: improve padding regex @KrayzeeKev

    • new

      isVAT: improve FR locale @iamAmer

    • fixed
    • fixed
  6. 13.15.15

    28 May 202516 new · 6 fixes
    • new

      isMobilePhone: improve el-CY locale @rezk2ll

    • new

      isMobilePhone: improve pt-AO locale @renaldodev

    • new

      isMobilePhone: improve ar-OM locale @tomcastro

    • new

      isIP: allow usage of option object @pixelbucket-dev

  7. 13.15.0

    24 Mar 202532 new · 12 fixes
    • new

      isISO31661Numeric @RobinvanderVliet

    • new

      isULID @arafatkn

    • new

      isISO15924 @xDivisionByZerox

    • new

      isMobilePhone: add es-GT locale @ignaciosuarezquilis

  8. 13.12.0

    9 May 202417 new · 7 fixes
    • new

      isAbaRouting @songyuew

    • new

      isLicensePlate add Pakistani en-PK locale @anasshakil

    • new

      isPort fix invalid leading zeros @anasshakil

    • new

      isTaxID added Argentina es-AR locale @estefrare

70 other lines we could not sort, mostly version bumps
  • New features: isVAT #1463

    13.5.1
  • New features: isTaxID #1446

    13.5.1
  • New features: isBase58 #1445

    13.5.1
  • New features: isStrongPassword #1348

    13.5.1
  • Fixes and Enhancements: isISO8601: add strictSeparator @brostone51

    13.5.1
  • Fixes and Enhancements: isFQDN: make more strict @CristhianMotoche

    13.5.1
  • Fixes and Enhancements: isFQDN: allow_underscore option @gibson042

    13.5.1
  • Fixes and Enhancements: isEmail: character blacklisting @rubiin

    13.5.1
  • Fixes and Enhancements: isURL: added require_port option @yshanli

    13.5.1
  • Fixes and Enhancements: isEmail: respect ignore_max_length option @evantahler

    13.5.1

5 internal lines (docs, tests, tooling) left out.